@bli-cockpit/cli 0.2.292 → 0.2.293

package/dist/commands/notes.js

@@ -48,7 +48,7 @@
 import os from "node:os";
 import { loadPairedSession } from "../tower-client.js";
 import { listNotes, listShelves, showNote, showShelf } from "./notes-reads.js";
-import { uploadNotes, pasteNote, shareNote, summarizeNote, moveNote, placeNote } from "./notes-writes.js";
+import { uploadNotes, pasteNote, shareNote, summarizeNote, moveNote, placeNote, correctNote } from "./notes-writes.js";
 import { runFolderCommand } from "./notes-folders.js";
 import { armNotesWebhook, connectNotetaker, detachNotetaker, listNotesAccounts, showNotesWebhook, syncNotetaker, syncStatusNotetakers, } from "./notes-accounts.js";
 import { showBotUpcoming } from "./notes-bot-upcoming.js";
@@ -60,7 +60,7 @@ import { defaultRecordDeps, runNotesRecord } from "./notes-record.js";
 import { runNotesApp } from "./notes-app.js";
 import { defaultExec, errorMessage } from "./cli-io.js";
 export { listNotes, listShelves, showNote, showShelf } from "./notes-reads.js";
-export { uploadNotes, pasteNote, shareNote, summarizeNote, moveNote, placeNote } from "./notes-writes.js";
+export { uploadNotes, pasteNote, shareNote, summarizeNote, moveNote, placeNote, correctNote } from "./notes-writes.js";
 export { armNotesWebhook, connectNotetaker, detachNotetaker, listNotesAccounts, showNotesWebhook, syncNotetaker, syncStatusNotetakers, } from "./notes-accounts.js";
 export { showGranolaStatus } from "./notes-granola-status.js";
 export { showTranscriptionStats } from "./notes-transcription-stats.js";
@@ -80,6 +80,7 @@ const NOTES_VERBS = {
     paste: pasteNote,
     share: shareNote,
     unshare: shareNote,
+    correct: correctNote,
     summarize: summarizeNote,
     move: moveNote,
     place: placeNote,

package/dist/commands/public-root.js

@@ -21,7 +21,7 @@ export async function runCockpitCli(argv, io) {
   }
 
   if (command === "--version" || command === "-V" || command === "version") {
-    writeLine(io?.stdout ?? process.stdout, "0.2.292");
+    writeLine(io?.stdout ?? process.stdout, "0.2.293");
     return 0;
   }
 

package/dist/commands/session-sync-record.js

@@ -317,11 +317,13 @@ function recordSourceObservation(options, result) {
     const uploadedAt = uploadedThisSync
         ? options.now.toISOString()
         : (prior?.uploaded_at ?? (durableThisSync ? options.now.toISOString() : null));
-    const uploadedByteSize = uploadedThisSync
+    const uploadedByteSize = uploadedThisSync || (durableThisSync && options.source === "codex")
         ? result.byte_size
         : (prior?.uploaded_byte_size ?? (durableThisSync ? result.byte_size : null));
     const entry = {
         file_hash_sha256: result.content_hash_sha256,
+        uploaded_source_revision: durableThisSync && !isRedactionStubObjectKey(uploadedObjectKey)
+            ? result.content_hash_sha256 : prior?.uploaded_source_revision ?? null,
         file_mtime_ms: result.session_file_mtime_ms,
         byte_size: result.byte_size,
         // Durable byte offset reflects how many bytes are durable remotely (the

package/dist/commands/session-sync-scan.js

@@ -1,3 +1,4 @@
+import { nativeSessionRoots } from "../native-session-roots.js";
 /**
  * Reading both session stores, and settling what the reading owes.
  *
@@ -9,7 +10,7 @@
  */
 import path from "node:path";
 import { saveRootWorkScan } from "../root-work.js";
-import { CODEX_ATTRIBUTION_SCAN_WINDOW_SESSION_LIMIT, CODEX_ATTRIBUTION_SCAN_WINDOW_MINUTES, defaultCodexSessionDirs, scanAndAttributeCodexSessions, } from "../adapters/codex-attribution.js";
+import { CODEX_ATTRIBUTION_SCAN_WINDOW_SESSION_LIMIT, CODEX_ATTRIBUTION_SCAN_WINDOW_MINUTES, scanAndAttributeCodexSessions, } from "../adapters/codex-attribution.js";
 import { scanAndAttributeClaudeSessions, } from "../adapters/claude-attribution.js";
 import { CLAUDE_CURSOR_FILENAME } from "../cursors/raw-evidence-cursor.js";
 import { isRedactionStubObjectKey } from "../cursors/raw-evidence-stub-entry.js";
@@ -31,9 +32,10 @@ const CLAUDE_DEFAULT_WINDOW_MINUTES = 24 * 60;
  */
 export async function scanAndAttributeBothSources(options) {
     const { plan } = options;
+    const roots = nativeSessionRoots(options.homeDir);
     const codexScanned = await scanCodexSessionsForSync({
         codexEnabled: plan.codexEnabled,
-        homeDir: options.homeDir,
+        roots,
         worktrees: options.worktrees,
         now: options.now,
         collectionRoots: plan.collectionRoots,
@@ -48,7 +50,7 @@ export async function scanAndAttributeBothSources(options) {
     const firstRunBackfill = plan.claudeEnabled && !claudeCursorExists;
     const claudeScanned = await scanClaudeSessionsForSync({
         claudeEnabled: plan.claudeEnabled,
-        homeDir: options.homeDir,
+        roots,
         worktrees: options.worktrees,
         now: options.now,
         collectionRoots: plan.collectionRoots,
@@ -58,6 +60,10 @@ export async function scanAndAttributeBothSources(options) {
         outsideRootCatchUpPending: plan.outsideRootCatchUpPending,
         stateDir: options.paths.state_dir,
     });
+    if (roots.discoveryFailed) {
+        codexScanned.directory_read_failed_count += 1;
+        claudeScanned.project_dir_read_failed_count += 1;
+    }
     // BLI-23590: under `roots_only` a session outside every approved root leaves the result HERE, before the retry
     // bookkeeping, the local work scan, the upload, the report or the git scan can see it.
     let codexAttribution = codexScanned;
@@ -117,7 +123,7 @@ async function scanCodexSessionsForSync(options) {
     const readMemo = await openTranscriptReadMemo(options.stateDir, "codex_attribution").catch(() => undefined);
     try {
         let scan = await scanAndAttributeCodexSessions({
-            sessionsDirs: defaultCodexSessionDirs(options.homeDir),
+            sessionsDirs: options.roots.codex,
             worktrees: options.worktrees,
             now: options.now,
             sinceMinutes,
@@ -130,7 +136,7 @@ async function scanCodexSessionsForSync(options) {
             // capped scan still returns every session it found instead of silently
             // truncating at the window's default limit.
             scan = await scanAndAttributeCodexSessions({
-                sessionsDirs: defaultCodexSessionDirs(options.homeDir),
+                sessionsDirs: options.roots.codex,
                 worktrees: options.worktrees,
                 now: options.now,
                 sinceMinutes,
@@ -159,12 +165,13 @@ async function scanClaudeSessionsForSync(options) {
         : options.firstRunBackfill
             ? CLAUDE_FIRST_RUN_BACKFILL_MINUTES
             : undefined, options.outsideRootCatchUpPending, CLAUDE_DEFAULT_WINDOW_MINUTES);
-    const projectsDir = path.join(options.homeDir, ".claude", "projects");
+    const { claudeProjects: projectsDir, claudeProjectDirs: projectsDirs } = options.roots;
     // BLI-22797: one memo for both passes, settled once, so an unchanged file is never opened.
     const readMemo = await openTranscriptReadMemo(options.stateDir, "attribution").catch(() => undefined);
     try {
         let scan = await scanAndAttributeClaudeSessions({
             projectsDir,
+            projectsDirs,
             worktrees: options.worktrees,
             now: options.now,
             collectionRoots: options.collectionRoots,
@@ -174,6 +181,7 @@ async function scanClaudeSessionsForSync(options) {
         if (scan.session_limit_applied) {
             scan = await scanAndAttributeClaudeSessions({
                 projectsDir,
+                projectsDirs,
                 worktrees: options.worktrees,
                 now: options.now,
                 collectionRoots: options.collectionRoots,

package/dist/commands/session-sync-shelf.js

@@ -34,6 +34,8 @@ export function sessionShelf(result, rules) {
         return { shelf: "team", reason: "routing_inactive" };
     if (rules.failed)
         return { shelf: "drawer", reason: "shelf_resolve_failed" };
+    if (result.local_cwds && (result.local_cwds.length === 0 || result.local_cwds.some(cwd => !cwd || resolveShelfWith(rules, cwd).shelf !== "team")))
+        return { shelf: "drawer", reason: "shelf_identity_mismatch" };
     if (result.state === "ambiguous")
         return { shelf: "drawer", reason: "ambiguous_attribution" };
     const byWorktree = result.worktree && !isOutsideRootsWorkspace(result.worktree)

package/dist/commands/session-sync-upload.js

@@ -180,6 +180,7 @@ function ambientEnvelopeForWorktree(options) {
             .map((result) => ({
             local_path: result.file_path,
             codex_session_id: result.codex_session_id,
+            ...(result.segment_paths ? { segment_paths: result.segment_paths, revision_hash: result.content_hash_sha256 ?? undefined, revision_bytes: result.byte_size } : {}),
         })),
         codexAttributionScan: scan.codexAttribution,
         claudeSessionFiles,

package/dist/commands/sources-discovery.js

@@ -1,3 +1,5 @@
+import { openCodexSessionRevision } from "../adapters/codex-session-revision.js";
+import { nativeSessionRoots } from "../native-session-roots.js";
 /**
  * Every agent transcript on this machine, named the way the collector names
  * its upload (BLI-11122).
@@ -29,13 +31,7 @@ import { SESSION_FILE_UUID_PATTERN, sanitizeSessionId, sessionIdFromFileName, sh
 import { isSecretLikePath, safeKeySegment } from "../adapters/raw-evidence-keys.js";
 import { describeError } from "../health-detail.js";
 export function sourcesRoots(homeDir, pathApi = path) {
-    return {
-        codex: [
-            pathApi.join(homeDir, ".codex", "sessions"),
-            pathApi.join(homeDir, ".codex", "archived_sessions"),
-        ],
-        claudeProjects: pathApi.join(homeDir, ".claude", "projects"),
-    };
+    return nativeSessionRoots(homeDir, pathApi);
 }
 /** Which kind of transcript a path is, or null for anything the collector does not upload as one. */
 export function classifyTranscriptPath(filePath, roots, pathApi = path) {
@@ -46,7 +42,13 @@ export function classifyTranscriptPath(filePath, roots, pathApi = path) {
         if (rel && !rel.startsWith("..") && !pathApi.isAbsolute(rel))
             return { kind: "codex_rollout" };
     }
-    const rel = pathApi.relative(roots.claudeProjects, filePath);
+    const claudeRoot = (roots.claudeProjectDirs ?? [roots.claudeProjects]).find((root) => {
+        const relative = pathApi.relative(root, filePath);
+        return relative && !relative.startsWith("..") && !pathApi.isAbsolute(relative);
+    });
+    if (!claudeRoot)
+        return null;
+    const rel = pathApi.relative(claudeRoot, filePath);
     if (!rel || rel.startsWith("..") || pathApi.isAbsolute(rel))
         return null;
     const parts = rel.split(pathApi.sep);
@@ -128,15 +130,18 @@ function trimmed(value) {
 }
 /**
  * Walk every root, name every transcript. `olderThanMs` keeps only files whose
- * mtime is before it; the rest are counted, never read.
+ * revision mtime is before it. Native identities are read before that filter
+ * so an older segment cannot be misreported as the whole retained session.
  */
 export async function discoverLocalTranscripts(options) {
     const roots = sourcesRoots(options.homeDir);
-    const result = { files: [], newer_count: 0, directory_read_failed: 0, file_read_failed: 0 };
+    const result = { files: [], newer_count: 0, directory_read_failed: roots.discoveryFailed ? 1 : 0, file_read_failed: 0 };
     let firstFailure = null;
     const recordFailure = (error) => { firstFailure ??= describeError(error); };
     const found = await findTranscriptFiles(options, roots, result, recordFailure);
     await nameTranscriptFiles(found, result, recordFailure);
+    await groupCodexRevisions(result);
+    result.files = result.files.filter(f => options.olderThanMs === null || f.mtime_ms < options.olderThanMs);
     if (result.directory_read_failed > 0 || result.file_read_failed > 0) {
         console.error("[collector sources] some transcripts could not be read; they are left out of the answer", JSON.stringify({
             reason: "sources_discovery_incomplete",
@@ -153,12 +158,17 @@ function shapeOrder(shape) {
 }
 async function findTranscriptFiles(options, roots, result, recordFailure) {
     const found = [];
-    const stack = options.skipAll ? [] : [...(options.skipCodex ? [] : roots.codex), ...(options.skipClaude ? [] : [roots.claudeProjects])];
+    const stack = options.skipAll ? [] : [...(options.skipCodex ? [] : roots.codex), ...(options.skipClaude ? [] : (roots.claudeProjectDirs ?? [roots.claudeProjects]))];
     const seen = new Set();
+    const visitedDirectories = new Set();
     while (stack.length > 0) {
         const dir = stack.pop();
         let entries;
         try {
+            const directoryIdentity = await fs.realpath(dir);
+            if (visitedDirectories.has(directoryIdentity))
+                continue;
+            visitedDirectories.add(directoryIdentity);
             entries = await fs.readdir(dir, { withFileTypes: true });
         }
         catch (error) {
@@ -187,10 +197,8 @@ async function findTranscriptFiles(options, roots, result, recordFailure) {
             });
             if (!stat)
                 continue;
-            if (options.olderThanMs !== null && stat.mtimeMs >= options.olderThanMs) {
+            if (options.olderThanMs !== null && stat.mtimeMs >= options.olderThanMs)
                 result.newer_count += 1;
-                continue;
-            }
             found.push({ file: full, size: stat.size, mtimeMs: stat.mtimeMs, shape });
         }
     }
@@ -237,4 +245,45 @@ async function nameTranscriptFiles(found, result, recordFailure) {
             key: transcriptKeyFor(source, named.session_id, item.shape.kind === "claude_subagent" ? item.shape.sidecar_stem : null),
         });
     }
+}
+/** One source row/pointer names the complete native session revision, never an arbitrary segment. */
+async function groupCodexRevisions(result) {
+    const groups = new Map();
+    for (const file of result.files)
+        if (file.source === "codex") {
+            const group = groups.get(file.session_id) ?? [];
+            group.push(file);
+            groups.set(file.session_id, group);
+        }
+    const replacements = new Map();
+    for (const [id, files] of groups) {
+        if (files.length < 2)
+            continue;
+        const representative = [...files].sort((a, b) => a.file_path.localeCompare(b.file_path))[0];
+        const combined = { ...representative, segment_paths: files.map(f => f.file_path).sort(),
+            segment_stamps: files.map(f => ({ path: f.file_path, size: f.byte_size, mtime: f.mtime_ms })),
+            byte_size: files.reduce((n, f) => n + f.byte_size, 0), mtime_ms: Math.max(...files.map(f => f.mtime_ms)) };
+        try {
+            const source = await openCodexSessionRevision(combined.segment_paths);
+            try {
+                combined.byte_size = source.length;
+            }
+            finally {
+                await source.close();
+            }
+        }
+        catch {
+            result.file_read_failed++;
+        }
+        replacements.set(id, combined);
+    }
+    const emitted = new Set();
+    result.files = result.files.flatMap(file => {
+        if (file.source !== "codex" || !replacements.has(file.session_id))
+            return [file];
+        if (emitted.has(file.session_id))
+            return [];
+        emitted.add(file.session_id);
+        return [replacements.get(file.session_id)];
+    });
 }

package/dist/commands/sources-reconciliation.js

@@ -22,7 +22,7 @@ export async function fetchSourceInventory(options) {
                 throw new Error("invalid_response");
             const valid = body.rows.every((row) => row && typeof row.id === "string" && uuid.test(row.id) &&
                 typeof row.source === "string" && (row.codex_session_id === null || typeof row.codex_session_id === "string") &&
-                (row.raw_evidence_pointer_id === null || (typeof row.raw_evidence_pointer_id === "string" && uuid.test(row.raw_evidence_pointer_id))));
+                (row.raw_evidence_pointer_id === null || (typeof row.raw_evidence_pointer_id === "string" && row.raw_evidence_pointer_id.trim().length > 0)));
             if (!valid)
                 throw new Error("invalid_response");
             const next = body.next_after;
@@ -67,14 +67,16 @@ export async function reconcileSource(input) {
         return inventory.status === "exhausted"
             ? answer("missing_pointer", "source_rows_without_pointer") : answer("unavailable_evidence", `row_inventory_${inventory.status}`);
     const objects = (remote.files.get(file.key) ?? []).filter(object => !object.stub &&
-        (file.kind === "claude_subagent" || (object.ref_id && pointers.has(object.ref_id))));
+        (file.kind === "claude_subagent" || ((object.ref_id && pointers.has(object.ref_id)) || pointers.has(object.object_key))));
     if (!objects.length)
         return answer("unavailable_evidence", remote.status === "exhausted" ? "pointer_not_in_current_transcripts_or_stub" : `transcripts_${remote.status}`);
     const split = facts.slimSplit ? await facts.slimSplit() : null;
     const form = split?.slim ?? (facts.slimAware && facts.wholeForm ? await facts.wholeForm() : await facts.sanitized());
-    const stat = await fs.stat(file.file_path);
-    if (stat.size !== file.byte_size || stat.mtimeMs !== file.mtime_ms)
-        return answer("unavailable_evidence", "local_file_changed_during_check");
+    for (const observed of file.segment_stamps ?? [{ path: file.file_path, size: file.byte_size, mtime: file.mtime_ms }]) {
+        const stat = await fs.stat(observed.path);
+        if (stat.size !== observed.size || stat.mtimeMs !== observed.mtime)
+            return answer("unavailable_evidence", "local_file_changed_during_check");
+    }
     if (form && objects.some(object => object.content_hash_sha256 === form.sha256 || object.content_hash_sha256 === split?.full.sha256))
         return answer("revision_verified", "current_redacted_hash_matches_pointer");
     // Sync refreshes the observed file hash even when growth damping retains an older

package/dist/commands/sources-verdict.js

@@ -32,6 +32,7 @@
  *
  * Read-only: this module reads the file and never writes, moves or deletes it.
  */
+import { codexRevisionFacts } from "./codex-revision-facts.js";
 import crypto from "node:crypto";
 import fs from "node:fs/promises";
 import path from "node:path";
@@ -162,6 +163,8 @@ upload = {}) {
     const mode = upload.mode ?? IMAGE_HANDLING_MODE;
     const describedKeys = upload.describedKeys ?? new Set();
     const slimAware = upload.slimAware ?? modeDropsImages(mode);
+    if (file.segment_paths)
+        return codexRevisionFacts(file.segment_paths, mode, describedKeys, slimAware);
     const redactForUpload = (text, original) => redactTranscriptForm(file, text, original);
     let split = null;
     let whole = null;

package/dist/cursors/raw-evidence-cursor.js

@@ -204,6 +204,7 @@ function parseSessionEntry(value) {
         return null;
     return {
         file_hash_sha256: optionalString(record["file_hash_sha256"]),
+        ...(typeof record["uploaded_source_revision"] === "string" ? { uploaded_source_revision: record["uploaded_source_revision"] } : {}),
         file_mtime_ms: optionalNumber(record["file_mtime_ms"]),
         byte_size: optionalNumber(record["byte_size"]),
         byte_offset: optionalNumber(record["byte_offset"]),

package/dist/image-description-session.js

@@ -16,7 +16,7 @@ import { sha256OfBase64Run } from "./image-byte-scan.js";
 import { addPdfsToFinds, mergeOccurrences, pdfsOfText } from "./pdf-transcript-step.js";
 import { openPinnedTranscript } from "./adapters/pinned-transcript.js";
 import { openStagedOutput, readStagedText } from "./adapters/staged-output.js";
-import { TranscriptNotStreamable } from "./adapters/transcript-text-stream.js";
+import { TranscriptNotStreamable, TranscriptTooLargeError } from "./adapters/transcript-text-stream.js";
 import { copyLinesStream } from "./slim/keep-line-copy.js";
 import { LineBytesSink, slimLineStream } from "./slim/slim-stream.js";
 import { logSlimmed, slimOrKeep, slimPassOrNull, slimTranscript } from "./slim/slim-transcript.js";
@@ -133,9 +133,11 @@ async function prepareFileInTwoPasses(run, input) {
     const startedAt = Date.now();
     // The file is opened once and its length pinned: the census offsets, the describe payload reads and the swap
     // pass all read these bytes, and a source that stopped being them is set aside (`verifyUnchanged`).
-    const source = await openPinnedTranscript(input.filePath, { maxFileBytes: input.maxFileBytes });
+    const source = input.openSource ? await input.openSource() : await openPinnedTranscript(input.filePath, { maxFileBytes: input.maxFileBytes });
     let writer;
     try {
+        if (input.maxFileBytes && source.length > input.maxFileBytes)
+            throw new TranscriptTooLargeError(input.maxFileBytes);
         // Pass one: discover. Nothing of the text is kept; only where each image is and what it is.
         const census = await censusOfLines(source.lines());
         // Describe attempts finish and the swap decisions are settled before a single line is swapped, as with the whole text.

package/dist/native-session-roots.js

@@ -0,0 +1,31 @@
+/** Shared native homes keep sync, backfill and reconciliation on the same inventory. */
+import path from "node:path";
+import { t3ImportedNativeHomes } from "./t3-native-homes.js";
+export function nativeSessionRoots(homeDir, pathApi = path, environment = process.env) {
+    let importedHomes = [];
+    let discoveryFailed = false;
+    try {
+        importedHomes = t3ImportedNativeHomes(homeDir);
+    }
+    catch {
+        discoveryFailed = true;
+    } // The reader logged its reason; existing native homes remain available.
+    const expandHome = (value) => value === "~"
+        ? homeDir
+        : /^~[/\\]/u.test(value) ? pathApi.join(homeDir, value.slice(2)) : value;
+    const homes = (source, defaultHome, configured) => {
+        const extra = configured?.trim();
+        // Relative environment values depend on the launching app's cwd. Never guess it.
+        return [...new Set([defaultHome, ...importedHomes.filter((entry) => entry.source === source).map((entry) => entry.home), ...(extra && pathApi.isAbsolute(expandHome(extra)) ? [expandHome(extra)] : [])]
+                .map((home) => pathApi.normalize(home)))];
+    };
+    const claudeProjectDirs = homes("claude_code", pathApi.join(homeDir, ".claude"), environment.CLAUDE_CONFIG_DIR)
+        .map((home) => pathApi.join(home, "projects"));
+    return {
+        discoveryFailed,
+        codex: homes("codex", pathApi.join(homeDir, ".codex"), environment.CODEX_HOME)
+            .flatMap((home) => [pathApi.join(home, "sessions"), pathApi.join(home, "archived_sessions")]),
+        claudeProjects: claudeProjectDirs[0],
+        claudeProjectDirs,
+    };
+}

package/dist/t3-native-homes.js

@@ -0,0 +1,64 @@
+/** Imported native references reveal homes without opening T3 settings or credentials. */
+import { existsSync } from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+const MAX_IMPORTED_REFERENCES = 10_000;
+/** Read only the installed 0.1.7 import-path projection, including live WAL state. */
+export function t3ImportedNativeHomes(homeDir) {
+    const databasePath = path.join(homeDir, ".t3", "userdata", "statev2.sqlite");
+    if (!existsSync(databasePath))
+        return [];
+    let database;
+    try {
+        // Optional runtime door: the public CLI still supports Node 20. A T3 store on
+        // that runtime must name the missing reader rather than report complete coverage.
+        const { DatabaseSync } = createRequire(import.meta.url)("node:sqlite");
+        database = new DatabaseSync(databasePath, { readOnly: true });
+        // Read explicit session columns only. No messages, settings, auth tables,
+        // attached databases or application write pragmas. One statement is a WAL snapshot.
+        const references = database.prepare(`
+      SELECT DISTINCT json_extract(reference.value, '$.provider') AS provider,
+        json_extract(reference.value, '$.filePath') AS file_path
+      FROM provider_session_runtime AS session,
+        json_each(session.runtime_payload_json, '$.importedTranscripts') AS reference
+      LIMIT ${MAX_IMPORTED_REFERENCES + 1}
+    `).all();
+        if (references.length > MAX_IMPORTED_REFERENCES)
+            throw new Error("t3_import_inventory_capped");
+        const homes = new Map();
+        for (const reference of references) {
+            const home = nativeHomeFromImport(reference.provider, reference.file_path);
+            if (home)
+                homes.set(`${home.source}:${home.home}`, home);
+        }
+        console.error("[native-session-roots] T3 import homes discovered", JSON.stringify({
+            reason: "t3_import_homes_read", references: references.length, unique_homes: homes.size,
+        }));
+        return [...homes.values()];
+    }
+    catch (error) {
+        // Never turn an unreadable/capped inventory into a green empty scan.
+        const reason = error instanceof Error && error.message === "t3_import_inventory_capped"
+            ? "t3_import_inventory_capped" : "t3_import_inventory_unreadable";
+        console.error("[native-session-roots] T3 discovery failed", JSON.stringify({ reason,
+            error_code: error?.code ?? "unknown" }));
+        throw new Error(reason);
+    }
+    finally {
+        database?.close();
+    }
+}
+function nativeHomeFromImport(provider, filePath) {
+    if (typeof filePath !== "string" || !path.isAbsolute(filePath) || !filePath.endsWith(".jsonl"))
+        return null;
+    const parts = path.normalize(filePath).split(path.sep);
+    const source = provider === "codex" ? "codex" : provider === "claudeAgent" ? "claude_code" : null;
+    if (!source)
+        return null;
+    const marker = source === "codex"
+        ? Math.max(parts.lastIndexOf("sessions"), parts.lastIndexOf("archived_sessions"))
+        : parts.lastIndexOf("projects");
+    if (marker < 1)
+        return null;
+    return { source, home: parts.slice(0, marker).join(path.sep) || path.parse(filePath).root };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/cli",
-  "version": "0.2.292",
+  "version": "0.2.293",
   "private": false,
   "type": "module",
   "bin": {
@@ -27,9 +27,9 @@
     "test": "node dist/cli.js --help && node ../../scripts/assert-public-cli-routing.mjs && node ../../scripts/assert-public-cli-verb-help.mjs && node ../../scripts/assert-public-cli-surface-doors.mjs && node ../../scripts/assert-public-cli-runtime-files.mjs && node ../../scripts/assert-public-cli-exit-contract.mjs && node ../../scripts/assert-public-cli-no-fleet-posts.mjs && node ../../scripts/assert-public-cli-doctor-json.mjs && node ../../scripts/assert-public-package-pack.mjs --workspace=@bli-cockpit/cli"
   },
   "dependencies": {
-    "@bli-cockpit/memory-mcp": "0.1.90",
-    "@bli-cockpit/mcp": "0.1.177",
-    "@bli-cockpit/telemetry-core": "0.1.96",
+    "@bli-cockpit/memory-mcp": "0.1.91",
+    "@bli-cockpit/mcp": "0.1.178",
+    "@bli-cockpit/telemetry-core": "0.1.97",
     "unpdf": "1.8.1"
   },
   "repository": {